Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
File: Uylu4zFT725pONV6KhMsHlJtxDA.mft (raw, json)
Hash identifier: 9GMpmal1L/WTb3HVBjcjpU1+59t45qxOxi+Hhlz9d6A=
Subject key identifier: 45:A2:C6:0E:09:CD:00:06:B6:3A:2E:5D:46:58:B9:5A:2C:16:31:99
Authority key identifier: 53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
Certificate issuer: /CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Certificate serial: 019CAD593278F98E0C08EB8CAF37E229AD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
Manifest number: 171D
Signing time: Mon 02 Mar 2026 07:00:29 +0000
Manifest this update: Mon 02 Mar 2026 07:00:29 +0000
Manifest next update: Tue 03 Mar 2026 07:00:29 +0000
Files and hashes: 1: MGJC7B1Ba42lx5xp2OR9KB_r3CM.roa (hash: 3dEWz8p/HyJK1M8zb2CLGf2EvdGWCjzIW7fX7f0DY+A=)
2: Uylu4zFT725pONV6KhMsHlJtxDA.crl (hash: Q/fcSHXmWrMsbzOp2qaSnBIIhglVGphhykOawDWG+w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:32:78:f9:8e:0c:08:eb:8c:af:37:e2:29:ad:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Validity
Not Before: Mar 2 07:00:29 2026 GMT
Not After : Mar 3 07:00:29 2026 GMT
Subject: CN=45a2c60e09cd0006b63a2e5d4658b95a2c163199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ca:10:3f:33:26:d0:c4:8a:54:e0:7f:fb:b1:
d5:e1:9b:e3:0c:7d:e3:e1:50:6e:ed:70:09:eb:e1:
66:b3:ec:ff:15:4e:fd:95:17:6d:ce:e2:5b:86:cf:
e0:e0:ff:97:a9:38:21:76:f4:61:c8:82:3d:1d:25:
87:01:91:0c:d8:50:b4:38:23:40:45:06:30:d6:ba:
3d:02:ae:60:f6:0f:91:ef:42:a9:ca:71:27:ac:fa:
e2:8f:19:23:eb:f7:1d:66:02:94:d5:d0:4a:69:94:
cd:4e:7f:3c:61:95:ee:f1:a0:97:65:20:a8:26:4e:
f5:97:72:61:d6:94:d5:a9:3c:d2:aa:a3:32:d2:29:
55:a3:08:1e:fe:2a:f1:87:ab:0f:35:60:a4:81:ce:
16:b8:7e:b0:51:c8:80:d4:36:11:a3:1d:96:75:e1:
30:88:d1:ef:40:20:59:e1:46:1d:89:54:41:0a:4a:
7a:c2:17:97:5e:ca:d7:0a:45:93:52:74:95:a0:56:
a6:61:fd:1a:07:90:f9:1d:20:0a:d2:99:54:10:ca:
59:67:9b:41:c6:63:86:f3:83:66:4c:5a:ab:48:7c:
10:a5:7c:f5:f1:21:3b:ea:37:bb:75:14:3c:14:a7:
c1:76:0c:d3:3f:6c:a9:d2:4f:34:1a:93:2e:ab:95:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A2:C6:0E:09:CD:00:06:B6:3A:2E:5D:46:58:B9:5A:2C:16:31:99
X509v3 Authority Key Identifier:
keyid:53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:85:e2:c0:91:d2:0d:40:3a:72:3a:da:c1:be:5c:26:6b:96:
e6:44:49:c1:a4:88:7c:f3:d2:aa:31:14:b3:7c:f9:57:32:b2:
a4:1b:cf:35:fb:42:53:4f:5e:8c:fa:8b:47:7d:cd:d8:76:b1:
9c:a3:c4:9b:c2:77:9a:a5:31:bf:8e:81:cb:45:65:43:24:0b:
d3:58:11:9e:6e:a4:2b:e2:42:39:3e:fc:8c:34:ba:e6:2f:9b:
6a:c8:58:c8:a5:34:8d:1f:b6:22:e4:99:45:54:17:d1:39:b9:
58:75:02:eb:a4:e6:f2:9f:46:64:45:63:48:79:21:4c:39:5b:
dd:69:df:3f:9d:f0:54:28:f9:a3:a0:91:ae:ac:ce:21:f8:87:
08:04:ec:b8:d4:1d:75:de:6a:0c:8e:de:bc:70:70:17:da:f8:
36:4d:0d:10:53:5b:1c:d8:59:4e:d8:ce:33:99:48:73:70:c5:
96:4c:d2:34:02:6a:ba:dc:e6:2a:d9:9e:9a:2d:3a:de:6e:64:
72:3b:eb:9e:5d:7d:92:b5:34:08:61:96:59:e3:bc:25:8a:d2:
ab:d2:ae:1f:30:4e:87:4d:c3:91:b5:3d:4e:5b:a3:ac:d0:19:
40:b2:aa:10:5a:d5:5b:b4:88:d1:06:d1:2c:3e:d6:94:5b:69:
0d:5c:b6:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWTJ4+Y4MCOuMrzfiKa2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMjk2ZWUzMzE1M2VmNmU2OTM4ZDU3YTJhMTMyYzFlNTI2
ZGM0MzAwHhcNMjYwMzAyMDcwMDI5WhcNMjYwMzAzMDcwMDI5WjAzMTEwLwYDVQQD
Eyg0NWEyYzYwZTA5Y2QwMDA2YjYzYTJlNWQ0NjU4Yjk1YTJjMTYzMTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5soQPzMm0MSKVOB/+7HV4ZvjDH3j
4VBu7XAJ6+Fms+z/FU79lRdtzuJbhs/g4P+XqTghdvRhyII9HSWHAZEM2FC0OCNA
RQYw1ro9Aq5g9g+R70KpynEnrPrijxkj6/cdZgKU1dBKaZTNTn88YZXu8aCXZSCo
Jk71l3Jh1pTVqTzSqqMy0ilVowge/irxh6sPNWCkgc4WuH6wUciA1DYRox2WdeEw
iNHvQCBZ4UYdiVRBCkp6wheXXsrXCkWTUnSVoFamYf0aB5D5HSAK0plUEMpZZ5tB
xmOG84NmTFqrSHwQpXz18SE76je7dRQ8FKfBdgzTP2yp0k80GpMuq5X4gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWixg4JzQAGtjouXUZYuVosFjGZMB8GA1UdIwQY
MBaAFFMpbuMxU+9uaTjVeioTLB5SbcQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXlsdTR6RlQ3MjVwT05WNktoTXNIbEp0eERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mOGIzODEtNjkyYS00ODMwLThkN2Qt
MjFiZjcwOGYzY2FkLzEvVXlsdTR6RlQ3MjVwT05WNktoTXNIbEp0eERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mOGIzODEtNjkyYS00ODMwLThkN2QtMjFiZjcwOGYzY2Fk
LzEvVXlsdTR6RlQ3MjVwT05WNktoTXNIbEp0eERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYXiwJHS
DUA6cjrawb5cJmuW5kRJwaSIfPPSqjEUs3z5VzKypBvPNftCU09ejPqLR33N2Hax
nKPEm8J3mqUxv46By0VlQyQL01gRnm6kK+JCOT78jDS65i+bashYyKU0jR+2IuSZ
RVQX0Tm5WHUC66Tm8p9GZEVjSHkhTDlb3WnfP53wVCj5o6CRrqzOIfiHCATsuNQd
dd5qDI7evHBwF9r4Nk0NEFNbHNhZTtjOM5lIc3DFlkzSNAJqutzmKtmemi063m5k
cjvrnl19krU0CGGWWeO8JYrSq9KuHzBOh03DkbU9TlujrNAZQLKqEFrVW7SI0QbR
LD7WlFtpDVy2rQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:39 2026 by rpki-client